fribidi vulnerabilities

Products

• gnu fribidi 1
• pyfribidi 1

Latest fribidi CVEs

Newest publication first

1. CVE-2012-1176 PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function

   Published 2012-08-26

   Medium·CVSS 5.0 EPSS 2.7%

   Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.

2. CVE-2010-3444 Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of servic...

   Published 2011-01-11

   High·CVSS 7.5 EPSS 4.5%

   Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Arabic UTF-8 string...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.